Dequire homepage

In addition to removing the login requirement on the homepage, a previous story broke some things on the visual side. Fixed it and added some tests.
I may need more clarity on your question, but I'm triggering this as an after_filter on the home controller. It was moved from the application controller (originally there to address users on the oauth side that don't exist in C2); it was creating users from requests to #approval_response which requires a token but doesn't need a user session to be set. Recommendations? Likely a better way to do this.